Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
File:                     Qg2MLsPSR5xUI6v_dHgriopLfeo.mft (raw, json)
Hash identifier:          JvZHuAvWRtP3tSeE8H9fWJ1+Izk7Vg8rr/7yGET9fQA=
Subject key identifier:   1A:AB:9E:14:25:AE:C3:EE:00:23:3C:E8:FF:F1:26:70:6D:40:77:97
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Certificate issuer:       /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial:       1CB8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
Manifest number:          1C90
Signing time:             Tue 12 May 2026 16:12:20 +0000
Manifest this update:     Tue 12 May 2026 16:12:19 +0000
Manifest next update:     Tue 19 May 2026 16:12:19 +0000
Files and hashes:         1: Qg2MLsPSR5xUI6v_dHgriopLfeo.crl (hash: sPRNGZm0+wl21BoWgiiWWuz6hyV6v/RxQcy8jEmyIaE=)
                          2: A770EFB01E5611EFAF3FCB38C4F9AE02.roa (hash: EvrlKUJ7eCvu6YP+MtDTuqMrMSZ2GeflApGRKT/txT4=)
                          3: 6892F5F2663C11F08C247C68C4F9AE02.roa (hash: QLCbgoMVS3G9VHYM06+C4WObA6B/KseYMNiE38jKgGw=)
                          4: DD55266E1E5611EFAFFD4839C4F9AE02.roa (hash: wBGm4fFHkS0MsUDVoFS2mN9ly3H+yMyEnIGfWIGaVpk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
                          rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7352 (0x1cb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182F75, serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
        Validity
            Not Before: May 12 16:12:19 2026 GMT
            Not After : May 19 16:12:19 2026 GMT
        Subject: CN=6a035164-5f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7f:02:0a:e9:74:c0:50:09:e2:8f:7b:8a:89:
                    3a:86:22:2d:1a:f6:a8:7e:69:8e:7a:a1:33:86:da:
                    f1:ab:81:9f:62:f5:1a:67:30:fe:61:10:2f:e6:fa:
                    a8:f9:16:3a:e6:3b:a9:a2:61:7c:87:ca:3b:e2:e4:
                    e1:ce:c2:a2:e0:d6:26:06:0c:5e:cc:bb:b9:1f:5d:
                    8c:7f:23:0d:9b:48:52:17:96:ab:77:28:e9:b9:5e:
                    3b:47:1a:6e:ae:31:fc:17:df:41:b6:5e:e4:58:9a:
                    19:94:a5:23:02:34:5e:00:21:a4:82:90:eb:cd:34:
                    84:cc:03:dc:ed:11:df:b2:41:4d:d9:e0:a6:86:02:
                    7e:9c:e0:2b:48:00:97:3d:00:8a:a0:34:bc:a4:39:
                    e5:af:cf:f7:09:26:c6:08:b1:86:28:e5:5f:51:5b:
                    49:75:97:0c:a9:20:7b:02:c9:bd:b4:70:73:81:a5:
                    68:74:a0:42:cc:64:ae:b5:ef:d7:af:97:08:46:26:
                    20:ed:83:9f:5d:c4:9e:eb:43:8c:9d:a7:27:6b:28:
                    46:a6:d8:11:34:49:1a:f7:ec:90:8f:76:75:8e:6d:
                    71:0c:7f:81:89:c5:de:36:fb:9b:c6:75:a4:d8:97:
                    6e:99:9e:75:b5:4a:15:b7:fe:4e:c9:15:d1:f3:5a:
                    de:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AB:9E:14:25:AE:C3:EE:00:23:3C:E8:FF:F1:26:70:6D:40:77:97
            X509v3 Authority Key Identifier:
                keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:3b:9b:e0:59:09:8c:41:b5:5a:a5:64:f9:46:3c:35:8d:1b:
         dd:5c:11:d4:73:9e:da:9e:11:8f:8d:69:48:21:30:2d:80:52:
         8a:80:d2:b9:c5:80:00:c9:98:f4:97:03:2e:c9:40:7b:ca:2d:
         7e:65:83:a2:dc:03:1e:7e:20:3b:85:b7:60:cd:e8:07:89:71:
         15:c9:f7:59:3a:74:56:14:58:68:5c:34:8b:ee:35:4b:85:7a:
         a5:6d:7b:eb:2d:20:a0:7a:4a:41:4f:b1:53:4d:8f:4d:35:6e:
         58:95:32:b7:92:38:6e:20:0f:dd:23:38:d9:62:9a:62:1a:b2:
         ab:8d:3b:0b:c9:61:07:89:d4:f2:12:4d:ea:22:7b:68:38:b0:
         13:21:8a:df:d1:17:f9:da:82:a6:a3:73:18:54:d2:cd:96:8a:
         21:1b:cc:d9:68:7b:6e:0b:ec:5f:f0:18:f6:5a:18:24:9d:4a:
         3e:85:d3:43:e6:13:67:ae:2b:8f:9a:e4:73:61:6a:b1:db:03:
         00:a3:5f:96:4f:8b:8d:17:29:1c:49:f3:7a:ad:61:82:8a:66:
         ea:da:f2:f2:e0:82:20:77:fa:74:32:b9:31:d0:ab:61:bc:92:
         cf:2c:e7:35:56:fe:bf:57:d8:f5:84:2f:b8:e8:1d:11:13:e4:
         30:0f:f9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:14:11 2026 by rpki-client